full-disclosure - CERT Employee Gets Owned

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20030826221556.GF20559@Bragi.private.network>
From: mds at helices.org (Michael D Schleif)
Subject: CERT Employee Gets Owned

Nelson <nelson-brito@...com.br> [2003:08:26:15:32:27-0300] scribed:
> > You have *zero* knowledge about *this* incident.  And *that* was my
> > point.  It's bad enough that the damn news media speculates about
> > everything under the sun these days.  Why do *we* have to?  What the
> > hell is the point of speculating about all the various possibilities
> > tied to an incident of which every one of us is ignorant?  You may have
> > extensive knowledge of pedophilia, but do you know *anything* other than
> > what you've read in the news (and surely you don't buy that hook, line
> > and sinker, do you?)
> 
> The media always speculates about security, as we ever see when a teenager
> releases a WORM.
> 
> So, what can we do? Can't we talk about anything that goes to the media?
> 
> PLEASE, STOP THE DIGITAL MASTURBATION AND OPEN YOUR EYES. IT'S ABOUT SECURITY,
> IT'S A BIG ISSUE, CAUSE IT'S ABOUT CERT.
> 
> PS: Is he a friend of yours?

Is there *NO* line?

What if he'd been arrested on _suspicion_ of complicity in a liquor
store robbery?

Or, what if you don't like the way he looks at your girlfriend?

If his current charges -- alone -- are grounds for suspecting his entire
professional life and professional output, where do we draw that line?

-- 
Best Regards,

mds
-
Dare to fix things before they break . . .
-
Our capacity for understanding is inversely proportional to how much
we think we know.  The more I know, the more I know I don't know . . .
--
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030826/1f58a562/attachment.bin